Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130382e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130382e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          ZqpWmhcTUL7CZkcfIZ12qLdw+iN+yahoAM6sboEz7Ms=
Subject key identifier:   F1:16:85:FC:E0:AF:8F:BE:9D:1C:22:EC:7E:0E:36:B9:8F:D9:C2:CA
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       03A17968D782FEED17F687E16D44A9C44887795E
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130382e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:02 +0000
ROA not before:           Fri 09 Oct 2026 20:35:02 +0000
ROA not after:            Fri 08 Oct 2027 20:40:02 +0000
asID:                     27787
IP address blocks:        200.107.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:79:68:d7:82:fe:ed:17:f6:87:e1:6d:44:a9:c4:48:87:79:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:02 2026 GMT
            Not After : Oct  8 20:40:02 2027 GMT
        Subject: CN=F11685FCE0AF8FBE9D1C22EC7E0E36B98FD9C2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:cd:1f:fb:77:f9:d0:44:fb:f0:b9:d0:c5:
                    88:45:02:a9:e1:f8:76:f1:2e:97:ff:31:1a:f5:5e:
                    7e:f6:9d:0f:7e:e6:87:46:7a:83:e2:e8:ae:57:c2:
                    4d:48:f4:40:62:84:77:34:f5:58:c1:22:fe:aa:61:
                    02:27:28:fd:03:0e:46:39:9e:11:ff:47:ab:d5:f1:
                    4d:61:41:97:23:ba:25:1f:ec:52:cb:99:df:8d:d0:
                    63:ba:18:7c:b6:90:a2:85:74:37:79:66:5c:d4:a5:
                    73:74:29:a1:4e:f8:9f:26:aa:a4:65:3a:db:37:13:
                    29:60:85:9c:20:d9:d6:9b:0a:dd:f0:85:b1:ae:dc:
                    54:17:20:fa:1f:6e:21:52:83:ba:3e:3d:12:a6:77:
                    1e:c6:c3:ca:08:37:46:af:4a:d6:c8:02:57:3f:df:
                    80:d3:7e:d5:7c:80:c6:7e:03:75:95:21:e0:3a:a3:
                    e3:25:e5:61:b6:9a:89:31:ef:74:46:09:fe:92:a5:
                    0b:77:67:c3:58:5e:e6:3c:d8:e5:70:94:36:cd:b8:
                    92:df:a8:f5:58:82:28:df:b8:07:f8:c1:0b:f8:b9:
                    88:ee:81:65:03:af:ad:39:e4:23:2d:84:8a:f5:46:
                    39:3b:77:25:7e:60:43:d0:50:60:ea:01:79:e8:47:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:16:85:FC:E0:AF:8F:BE:9D:1C:22:EC:7E:0E:36:B9:8F:D9:C2:CA
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130382e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:60:a9:aa:4d:bf:b0:b9:d8:09:4c:89:17:4a:eb:c6:b0:52:
         92:8a:a5:99:7f:bb:89:8d:f3:bc:c1:2c:a9:ac:81:f1:0a:df:
         f5:99:3e:d1:eb:e9:c8:f1:bd:e3:e0:b3:95:27:68:00:2a:67:
         90:69:39:5c:67:42:1a:8a:72:e3:6e:ad:07:08:65:bb:76:c6:
         0b:44:98:1a:bb:e9:d7:c1:d6:d0:b3:c4:55:c4:82:d5:ff:f8:
         1e:c9:ad:c1:da:48:1e:f8:a4:b9:9f:94:cc:f7:80:eb:66:71:
         02:82:53:4f:3b:5f:dd:94:6a:8f:bd:b3:c5:40:d9:25:1a:e4:
         f3:d7:36:f7:46:81:be:60:f9:ab:68:e7:bc:01:8f:71:81:92:
         17:72:88:ea:e0:a3:40:57:82:e2:58:32:f8:a5:9b:b0:97:43:
         8e:3f:2a:e3:59:57:8d:3d:8e:ff:a6:b7:44:a0:9b:65:d8:6c:
         a5:ea:c3:16:03:9c:95:a2:63:7e:3a:be:bd:2d:96:63:9b:5a:
         c6:e7:ad:38:26:72:f8:75:fe:2b:bc:93:82:ef:42:f5:3a:52:
         0a:f6:8a:b6:5e:b9:61:6a:a2:f1:e3:bc:59:66:d9:6b:95:0e:
         be:a2:61:da:72:a1:52:e1:84:d8:5a:72:2c:82:b3:fb:ba:2b:
         ef:32:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:30 2026 by rpki-client